Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

4006c709fa...a1.exe

windows7-x64

8

4006c709fa...a1.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4006c709faeedf03e8b58886eeff6b40353caec761847756e2df446f7c20bfa1

  • Size

    231KB

  • Sample

    240814-b1xnyayfqr

  • MD5

    d7f7dfa376ae79bae6a0d295380998de

  • SHA1

    fba36039752c612c0ddb8ad6d1977f956bfe0276

  • SHA256

    4006c709faeedf03e8b58886eeff6b40353caec761847756e2df446f7c20bfa1

  • SHA512

    bdaa5a2b8d650ad5a091e6eca0deb62de63d080f9df2fe127a58d3432681d33f399d0575f97278e0af3566bda008295783981345b906d37a44c5a6a3d746f576

  • SSDEEP

    3072:N1JbT4aQQlT4aI4AgymsMU5a44Av2E8heNdqMREhJLsyV9GGWPGWgnVFqQMeJq7n:NPTh45gy/R4Av2TS9EhN1qQMeQLtDB

Score
8/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      4006c709faeedf03e8b58886eeff6b40353caec761847756e2df446f7c20bfa1

    • Size

      231KB

    • MD5

      d7f7dfa376ae79bae6a0d295380998de

    • SHA1

      fba36039752c612c0ddb8ad6d1977f956bfe0276

    • SHA256

      4006c709faeedf03e8b58886eeff6b40353caec761847756e2df446f7c20bfa1

    • SHA512

      bdaa5a2b8d650ad5a091e6eca0deb62de63d080f9df2fe127a58d3432681d33f399d0575f97278e0af3566bda008295783981345b906d37a44c5a6a3d746f576

    • SSDEEP

      3072:N1JbT4aQQlT4aI4AgymsMU5a44Av2E8heNdqMREhJLsyV9GGWPGWgnVFqQMeJq7n:NPTh45gy/R4Av2TS9EhN1qQMeQLtDB

    Score
    8/10
    bootkitdiscoverypersistence

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks for any installed AV software in registry

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks